[Spivak]

What is a reasonable idea when your adversary is the user?

How do you give a person secret knowledge that they need to provide you to authenticate but can’t provide to something else?

[closeparen]

TPMs built into managed devices; USB hardware tokens for others.